IT Cloud Security Architect - Digital Technology Services

Hackensack Meridian Health • Edison, NJ

86d • $153,732

About The Position

The Cloud Security Architect builds, maintains, upgrades and continuously improves cloud networks and cloud-based systems across the Hackensack Meridian Health (HMH) network. Responsible for the operations of secure cloud infrastructure, platforms, and software. Partners with Enterprise Architects, Infrastructure, Application and Development Teams to develop a deep technical understanding of HMH's technology ecosystem. Will conduct threat modeling, develop negative use cases / abuse cases, identify weak points, constraints, trust assumptions, and other potential attack vectors. They will document and prioritize these while partnering with other technical teams as a mentor and trusted advisor on remediation coursework. Also conduct architecture reviews, threat modeling, identify risks and advise Digital Technology Services (DTS), business owners and technical teams on options to mitigate the risk.

Requirements

• Bachelor's degree preferred, but would consider Associate's degree plus experience outlined below.
• Minimum of 10+ years of overall cybersecurity experience, including time spent as an enterprise Cloud Security Architect or another similar role that builds and supports secure cloud environments for a large enterprise.
• Strong knowledge of cloud security concepts with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (GCP) and Microsoft Azure cloud services.
• Wide breadth of knowledge across security products, tools, and industry trends; ability to create solutions using a pragmatic, risk-based approach.
• Strong knowledge of networking concepts and architecture, including security considerations associated with networking hardware like routers, switches, firewalls, gateways, etc.
• Understanding of malware, emerging threats, attacks, and vulnerability management.
• Excellent written and verbal communication skills.
• Proficient computer skills that may include but are not limited to Microsoft Office and/or Google Suite platforms.

Nice To Haves

• Strong knowledge of cloud technologies with SaaS, PaaS and IaaS platforms and the architectural knowledge of Google Cloud Platform (GCP), Amazon Web Services (AWS), and Microsoft Azure cloud services.
• Strong deductive reasoning, critical thinking, problem solving, and prioritization skills.
• Experience assisting the development and maintenance of tools, procedure, and documentation.
• Track record of effective project management and project delivery.
• Strong service mentality including the resolution of stakeholder escalations and incident management.
• Ability to work in a fast-paced team environment.
• Ability to develop detailed process and procedure documentation.
• Ability to present complex solutions and methods to both technical and non-technical stakeholders.
• Excellent written and verbal communication and organizational skills.
• Strong team player who collaborates well with others to solve problems.
• Strong interpersonal, problem solving, and communication skills.

Responsibilities

• Develop, document, and enforce cloud security policies, standards, and baselines through processes, reporting, and technical means.
• Monitor, benchmark and report progress of cloud security threats, assets, and vulnerabilities.
• Work with asset owners and vulnerability management team to identify and remediate cloud vulnerabilities.
• Participate in enterprise architecture review boards and processes and provide security recommendations for new and existing vendor and user-developed cloud technologies and interfaces.
• Perform monitoring and analysis of cloud logs and data outputs and participate in security and incident tracking, monitoring, and reporting.
• Provide updates for daily and weekly metrics for cloud security events and reporting.
• Deployment and administration of cloud security tooling and associated processes.
• Develop and maintain documentation for new and existing cloud processes and technologies.
• Stay informed and provide recommendations to cloud leadership of new and evolving cloud technologies, products, tooling, methodologies, threats, and risks that would affect the HMH environment.
• Develop, model and evolve cloud attack vectors and design security and/or mitigating controls to mitigate risk.
• Perform cloud assessments using enterprise methodologies and industry better practices.
• Maintain the cloud risk tracker and report to business and technology leadership of status of risks, mitigations, and remediation.
• Serve as a technical resource in the cybersecurity team efforts to build and deploy various configurations in the cloud and on-premise.
• Research and recommend new and evolving industry cloud technologies, solutions, management strategies and effective resource utilization models that can be presented to Senior Leadership (i.e. Directors and above).
• Build relationships with key DTS and business leaders across HMH which would include senior leadership (i.e. Directors and above).
• Learn on the job and explore new technologies with little supervision to identify new and emerging cloud threats.
• Other duties and/or projects as assigned.
• Adheres to HMH Organizational competencies and standards of behavior.

Benefits

• Health insurance
• Dental insurance
• Vision insurance
• Paid leave
• Tuition reimbursement
• Retirement benefits

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees